Hacking 3Down - CTRNAND Downgrade

adrifcastr

Well-Known Member
OP
Member
Joined
Sep 12, 2016
Messages
2,038
Trophies
0
XP
1,947
Country
Germany
Since a lot of people were complaining about 11.4 breaking NTR's streaming feature and wanting to Get Back to 11.3 without SysDowngrader / Having a NAND Backup (whyever), I am presenting you:
3Down
This is NOT violating any Terms in here, since the ctr images are torrent-hosted like in 3ds.guide
ATM I am seeding everything by myself so seeders are needed to even get this to work faster
So there you go this is hopefully helpful.

Thx to @Altimit for stating 4 the need of scrubbing!
If you want to share ctrtransfer dumps, you have to clean them to not provide personal data to the Public!
How to Clean/Scrub a ctrtransfer dump:
Godmode9 Part:
  • Mount a public ctrtransfer.bin which matches your 3DS and Region (for Example: 9.2.0-20E_ctrtransfer_n3ds)
  • Copy the following Files to a Folder on the SD-Card:
Code:
/dbs/ticket.db
/private/movable.sed
/rw/sys/LocalFriendCodeSeed_B
/rw/sys/SecureInfo_A
  • Mount your ctrtransfer.bin
  • Copy and replace the following Files you extracted one step before in your ctrtransfer.bin:
Code:
/dbs/ticket.db
/private/movable.sed
/rw/sys/LocalFriendCodeSeed_B
/rw/sys/SecureInfo_A
  • Delete the .sha for your ctrtransfer dump
  • Generate a new .sha for your modified dump

PC-Part:
Copy the ctrtransfer.bin and ctrtransfer.sha from SD-Card to your PC
Open the ctrtransfer.sha with a Hexeditor
Append HEX Value 02 (0x02) at the end of the File
Example:
Code:
Hash before modification:
E7 B9 5B 8C 3F EC E4 92 FC 2E D1 65 31 9E 54 27 6A 08 5F DC DC F1 AC 5F E2 85 B4 03 F2 6D 17 61
Hash after modification:
E7 B9 5B 8C 3F EC E4 92 FC 2E D1 65 31 9E 54 27 6A 08 5F DC DC F1 AC 5F E2 85 B4 03 F2 6D 17 61 02
It is not clear why safectrtransfer adds 0x02 to the Hash, perhaps it is some sort of Protection or EOF Checking - whatever

Technical Detail:
When flashing the ctrtransfer Image via Decrypt9,
/dbs/ticket.db
/private/movable.sed
/rw/sys/LocalFriendCodeSeed_B
/rw/sys/SecureInfo_A

and additionally configsave.bin
will be saved from your console Flash and restored after ctrtransfer. Unfortuanally Decrypt9 will not do its job when these files are missing, so this is why we have to replace them in the .bin

Update: finally manged to clean the images after 7 hours with help from @aut0mat3d
Update: Quick How2 to make your own ctrtransfer dumps "safe" by @aut0mat3d
Update: 11.2 / 11.3 o3ds EUR are live!
Update: 11.2 USA o3ds is Live! big thanks to @Yuan !
Update: added friendsave.bin dump + inject to prevent eventual loss of friendlists.
Update: added (obvious) Emunand instructions at Section 3 for Emunand users
Update: cleaned it up a bit, should be easier to see everything now.
Update: 11.2 Eur + 11.4 Eur + Tik bkup/restore is added
 
Last edited by adrifcastr,

RustInPeace

Samurai Cop
Member
Joined
Oct 13, 2014
Messages
5,913
Trophies
1
Age
29
XP
4,493
Country
United States
An hour before this I restored my 11.3 backup, to record one tiny little video for comedy. Confirming a thought, can this be used in making an 11.3 Emunand? Downloads are slow, has these been leeched this hard already? Will seed.
 

adrifcastr

Well-Known Member
OP
Member
Joined
Sep 12, 2016
Messages
2,038
Trophies
0
XP
1,947
Country
Germany
An hour before this I restored my 11.3 backup, to record one tiny little video for comedy. Confirming a thought, can this be used in making an 11.3 Emunand?
probably, I don't see why it shouldn't but I don't know if there is a way to directly ctrransfer to an emunand
 

RustInPeace

Samurai Cop
Member
Joined
Oct 13, 2014
Messages
5,913
Trophies
1
Age
29
XP
4,493
Country
United States
0.8 kb/s down speed :wtf:

DJYrYTn.png
 
  • Like
Reactions: medicy

adrifcastr

Well-Known Member
OP
Member
Joined
Sep 12, 2016
Messages
2,038
Trophies
0
XP
1,947
Country
Germany
0.8 kb/s down speed :wtf:
Yes probably because I am the only seeder atm and My laptop is hanging around in the corner using a wifi hotspot
I'm impressed that you are getting a that high speed since I am still the only seeder, wow.

edit haha the usa one has 11.3%
 
Last edited by adrifcastr,

adrifcastr

Well-Known Member
OP
Member
Joined
Sep 12, 2016
Messages
2,038
Trophies
0
XP
1,947
Country
Germany
I actually need this for some tests that I was requested to do! Thanks so much!
No problem, but check but the credits section for full Credits, I am just responsible for the eur files, the site and seeding :)

--------------------- MERGED ---------------------------

...wut. Anyway, I'll throw these on my seedbox to help.
thx a lot :)
 

The Catboy

GBATemp's Official Catboy™: Nya~
Member
Joined
Sep 13, 2009
Messages
25,475
Trophies
3
Age
30
Location
In front of my Switch
XP
27,621
Country
Antarctica
No problem, but check but the credits section for full Credits, I am just responsible for the eur files, the site and seeding :)
You compiled all the stuff I needed in one place, that's something worth thanking you for.
And I would also like to thank everyone else involved.
 
  • Like
Reactions: adrifcastr
General chit-chat
Help Users
  • No one is chatting at the moment.
    Dark_Phoras @ Dark_Phoras: Not the kind to eat ice cream while crying, are you?